If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Trojan cloaks itself as Firefox extension

Security vendor McAfee has detected a new piece of malicious software that masquerades as part of the Firefox Internet browser.

McAfee calls the Trojan horse "FormSpy." Trojan horses are programs, often attached to spam e-mail, that appear innocuous but are harmful to a computer.

FormSpy is downloaded to a computer that is already infected with another Trojan horse called "Downloader-AXM," McAfee said. That Trojan was recently detected in e-mail spam messages.

Downloader-AXM contacts servers to download other malicious programs to a computer without a user's knowledge, according to McAfee. Once downloaded, FormSpy installs itself as a Firefox extension.

The program appears as "NumberedLinks 0.9" extension, McAfee said. The extension normally would allow a user to navigate links by numbers using the keyboard rather than a mouse.

Then, FormSpy can transmit information in a Web browser to another Web site, which could include credit card numbers, passwords and electronic banking pin numbers, according to McAfee. FormSpy can also steal e-mail, ICQ instant messaging service and FTP (file transfer protocol) passwords, it said.

how do I know that this trojan is trying or has been installed in my firefox

You should be able to go to 'tools' &gt; 'extensions' and see which FF extensions are installed there... if there is one called "NumberedLinks 0.9" that YOU didn't install, then you might have a trojan...

hmm... that could turn into a bad comedy routine...

\"Those of us that had been up all night were in no mood for coffee and donuts, we wanted strong drink.\"